Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lz11PFdqeHQqTyieVTwfYTCWMOk.roa
File:                     Lz11PFdqeHQqTyieVTwfYTCWMOk.roa (raw, json)
Hash identifier:          uIf49y0M9Po9TwR9qcF0BY4WjQCA60MM5v9E+JXTqD0=
Subject key identifier:   2F:3D:75:3C:57:6A:78:74:2A:4F:28:9E:55:3C:1F:61:30:96:30:E9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lz11PFdqeHQqTyieVTwfYTCWMOk.roa
Signing time:             Thu 15 Sep 2022 02:46:15 +0000
ROA not before:           Thu 15 Sep 2022 02:46:15 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.195.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:15 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2F3D753C576A78742A4F289E553C1F61309630E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:bd:e4:03:78:49:ed:82:d4:16:f5:73:89:
                    b7:68:ff:7d:f7:f2:a3:c6:3b:90:e1:ab:73:6f:dd:
                    fd:e7:cc:2b:b1:9e:82:0a:d9:a9:19:65:ce:25:39:
                    88:d9:12:23:eb:36:64:80:d4:c4:94:3b:ad:ef:d7:
                    7c:9d:f2:43:f4:ed:35:a4:f4:c1:a7:34:6e:82:67:
                    83:eb:a9:93:f3:85:a7:a4:97:8b:d8:57:99:92:fd:
                    34:b6:0f:ab:c0:83:85:38:78:e1:cb:7e:26:b7:04:
                    c1:9a:58:de:dd:ce:cc:e2:f7:69:6e:70:56:8e:f2:
                    d6:03:2a:70:7f:e8:6a:d5:5c:b3:b8:8f:15:e2:bc:
                    83:99:51:b9:b6:a9:d9:84:c6:d1:ff:87:9a:96:8c:
                    9d:4d:8e:a5:3c:2f:a2:ee:14:77:bf:15:a5:27:ad:
                    bf:5f:4a:51:96:28:87:5f:88:c5:e0:24:1c:64:6b:
                    1c:91:55:97:f5:24:09:bb:83:0f:45:09:8c:a7:5b:
                    0e:e1:88:d5:52:ea:65:83:f8:b8:fa:32:b2:e2:43:
                    97:12:29:39:71:46:00:ac:b6:dd:a4:35:d3:a6:e4:
                    85:7a:da:ce:91:34:a5:05:54:be:c0:19:96:fa:c6:
                    8b:c8:33:64:58:65:32:a6:12:07:b3:ed:26:4a:6a:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3D:75:3C:57:6A:78:74:2A:4F:28:9E:55:3C:1F:61:30:96:30:E9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lz11PFdqeHQqTyieVTwfYTCWMOk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:bc:9a:fc:50:06:a2:21:7a:82:6c:26:e7:5f:ec:bd:40:
         1b:01:36:4f:fd:28:5c:ea:77:39:d6:aa:f6:64:d9:56:07:e2:
         5a:a5:79:6e:5b:09:e0:5c:17:f7:33:f6:b7:d5:11:89:da:8b:
         ea:66:6e:32:9a:f9:4f:1c:9e:48:cb:b4:0b:43:54:5a:ff:32:
         06:f0:d6:37:40:a3:fc:aa:e7:90:92:2e:90:fc:c6:c5:f4:9a:
         b8:a9:79:27:ba:1a:60:fd:da:96:ba:98:47:a1:34:ef:a7:c7:
         11:59:2f:60:28:5f:46:2c:3b:60:3a:f9:16:a0:cb:d5:23:d5:
         8a:d4:5e:76:25:c8:61:da:66:09:c0:f2:7b:9c:47:30:b6:fb:
         a1:b1:c6:96:73:11:f6:a3:f7:d4:4d:ff:43:a8:cd:fb:16:36:
         5c:3d:1e:a2:bf:77:ae:7c:3b:8d:2a:5a:36:ff:be:b7:ae:7d:
         ef:eb:29:40:a8:79:ea:d1:40:da:26:68:2e:8d:47:b1:4f:00:
         bf:e0:17:89:76:ac:0a:6a:23:76:3f:e2:02:32:0d:f6:45:f0:
         f6:8e:94:ed:af:d4:65:c9:62:72:94:a7:92:31:c5:dc:c1:e2:
         25:4d:5a:ec:82:7a:5d:67:fe:af:08:ab:d2:d1:cb:5d:0c:cf:
         d4:3b:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:17 2023 by rpki-client on console-ams.rpki-client.org